Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022302)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022302 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022329 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022358)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022358 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022328)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022328 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022357)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022357 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022350)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022350 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022342 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022353)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022353 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022268)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022268 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022323)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022323 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easi...

wasm3:fuzzer: Heap-buffer-overflow in m3_CallVL

Project: https://github.com/wasm3/wasm3.git Detailed Report: https://oss-fuzz.com/testcase?key=6319953280827392 Project: wasm3 Fuzzing Engine: libFuzzer Fuzz Target: fuzzer Job Type: libfuzzerasanwasm3 Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x77e5c33e00d0 Crash...

EUVD-2025-210850

The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before outputting them in an admin page, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability ...

EUVD-2025-210849

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate...

SUSE CVE-2026-11465

A security flaw has been discovered in songquanpeng one-api up to 0.6.11-preview.7. Affected by this issue is the function Redeem of the file model/redemption.go of the component Redemption Code Top-Up Endpoint. The manipulation results in business logic errors. The attack may be launched remotel...

Fedora 44 : rust-webbrowser (2026-0272e561a4)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-0272e561a4 advisory. Update to version 1.2.4. This includes a fix for RUSTSEC-2026-0257. Tenable has extracted the preceding description block directly from the Fedora security...

MozillaThunderbird-140.15.0-1.1 on GA media (moderate)

MozillaThunderbird-140.15.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11678-1 Rating: moderate Cross-References: CVE-2026-16365 CVE-2026-75874 CVE-2026-84119 CVE-2026-84120 CVE-2026-84121 CVE-2026-84122 CVE-2026-84124 CVE-2026-84131 CVE-2026-84143 CVE-2026-84145 CVE-2026-84639...

CVE-2025-15694: Improper Neutralization of Input During Web Page Generation

The Joli Table Of Contents WordPress plugin before 2.8.1 does not sanitise and escape some of its settings before outputting them in an admin page, which could allow high-privilege users such as administrators to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability ...

Linux Distros Unpatched Vulnerability : CVE-2026-82312

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC...

Fedora 44 : memcached (2026-c4493ff86b)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c4493ff86b advisory. Rebase to 1.6.45 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Slackware Linux 15.0 / current libxml2 Vulnerability (SSA:2026-247-01)

The version of libxml2 installed on the remote host is prior to 2.11.9 / 2.15.4. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-247-01 advisory. New libxml2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...